GitSpawn: Untrusted repos can execute code via AI coding agents
Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.
Summary
AI coding agents that operate through the command line can be exploited by untrusted repositories to execute code on your machine without any user interaction. Learn how this vulnerability poses a significant risk and what steps you might take to protect yourself.
Comments (2 of ) ⌛